$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa File: 5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa (raw, json) Hash identifier: yReSXFj5UI8Mg1pcJ6d1Y47bR7lbi/Jkpg37xKtTlI4= Subject key identifier: 31:C6:CA:0F:A8:0F:C7:E6:6F:9C:38:41:64:05:80:17:EF:88:E7:69 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584CFC82365169211912DCA13B00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 8069 IP address blocks: 20.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:36:51:69:21:19:12:dc:a1:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=b7a85c3c-4a45-4a4f-b9db-5a5b5e80f03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0f:d2:ca:ec:78:14:5c:c7:d4:cf:2e:d6:39: 57:7c:e5:89:ec:fb:3f:c1:91:a6:91:3b:e0:37:b3: ec:9b:d0:12:eb:be:bc:00:d4:4f:16:ea:17:7d:69: 40:a6:84:0b:66:f6:b1:90:3e:89:e8:7a:14:da:0e: 7d:0c:17:9f:9b:e0:8c:9b:7d:af:3e:a2:3c:12:51: 28:21:c7:59:2c:e0:91:2c:bf:aa:bd:8f:33:a7:fd: 0a:05:8c:9c:eb:0a:9d:ec:7b:62:6a:f2:7f:a9:c3: cf:85:c4:41:3d:e6:3c:74:35:c0:d7:51:8c:eb:97: d5:4e:9d:5d:ed:41:e2:56:a5:ef:3a:82:86:55:fa: a7:ef:f0:cc:72:c5:ec:b1:ae:01:1e:30:10:9c:33: b1:76:df:a4:83:d3:05:4b:a6:9c:52:4c:7b:50:8f: e3:06:f3:1e:73:45:38:3a:59:1d:47:03:1f:ee:9c: 01:84:5f:34:17:f2:ab:5c:12:43:a0:87:01:a6:72: 6c:71:05:91:2c:37:1a:81:9f:1c:59:1b:cd:fc:90: d9:a7:16:bc:f4:43:63:31:7d:c9:e1:1d:2d:7f:f9: 7c:36:3d:3b:66:2c:27:13:01:af:8d:31:5c:36:3e: 8a:52:09:7d:8f:13:87:f2:b2:40:51:03:36:50:c0: ec:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C6:CA:0F:A8:0F:C7:E6:6F:9C:38:41:64:05:80:17:EF:88:E7:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/5d6a574a-e6b0-33cd-94b4-03816b84ff63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8a:d3:3e:27:13:df:22:4e:e7:b5:2c:21:6d:89:97:62:9e: 2e:de:98:79:e8:f9:5e:27:d5:f4:f7:9f:2a:f6:f8:3a:35:72: 1f:9f:14:16:ea:8f:5d:ca:9f:51:b5:ad:fc:e3:4b:dd:17:0b: 03:3f:58:a9:e5:b1:b5:49:70:ac:35:42:7a:02:e8:7b:a2:47: e7:a3:73:ab:e1:1f:66:3b:06:a0:2e:a1:50:50:c4:19:67:78: 39:d3:47:5e:8e:89:b1:da:f7:d0:1d:2b:27:70:50:b3:91:fc: 55:e1:a1:a6:a5:03:b7:6a:b6:b9:06:a0:f1:c3:05:12:83:92: e8:e2:c2:e2:82:3b:e7:c6:04:3e:5e:92:4e:7c:5d:04:a7:34: ef:96:c3:7f:75:75:35:79:e1:ac:07:e9:1d:d5:d4:18:9c:3d: bd:88:6f:fb:6b:e6:f2:08:cb:18:cc:48:6e:f9:15:3d:f7:05: 57:74:63:85:d9:da:6a:5e:a6:6d:22:1e:8f:55:51:7e:e9:b6: ff:d0:4c:d4:c8:fa:5f:34:0d:5a:11:b4:ed:85:5a:12:ec:a7: b6:2d:ff:84:2b:90:89:71:90:a3:c5:2b:5b:ab:0d:d2:85:99: e9:25:c8:b1:ee:34:46:45:da:1b:d0:cc:11:ef:90:12:8a:e6: da:79:81:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjZRaSEZEtyhOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk YjdhODVjM2MtNGE0NS00YTRmLWI5ZGItNWE1YjVlODBmMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ/Syux4FFzH1M8u1jlXfOWJ7Ps/wZGmkTvg N7Psm9AS6768ANRPFuoXfWlApoQLZvaxkD6J6HoU2g59DBefm+CMm32vPqI8ElEo IcdZLOCRLL+qvY8zp/0KBYyc6wqd7HtiavJ/qcPPhcRBPeY8dDXA11GM65fVTp1d 7UHiVqXvOoKGVfqn7/DMcsXssa4BHjAQnDOxdt+kg9MFS6acUkx7UI/jBvMec0U4 OlkdRwMf7pwBhF80F/KrXBJDoIcBpnJscQWRLDcagZ8cWRvN/JDZpxa89ENjMX3J 4R0tf/l8Nj07ZiwnEwGvjTFcNj6KUgl9jxOH8rJAUQM2UMDsGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHGyg+oD8fmb5w4QWQFgBfviOdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNWQ2YTU3NGEtZTZiMC0z M2NkLTk0YjQtMDM4MTZiODRmZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiK0z4nE98iTue1LCFtiZdini7emHno+V4n1fT3nyr2+Do1ch+fFBbq j13Kn1G1rfzjS90XCwM/WKnlsbVJcKw1QnoC6HuiR+ejc6vhH2Y7BqAuoVBQxBln eDnTR16OibHa99AdKydwULOR/FXhoaalA7dqtrkGoPHDBRKDkujiwuKCO+fGBD5e kk58XQSnNO+Ww391dTV54awH6R3V1BicPb2Ib/tr5vIIyxjMSG75FT33BVd0Y4XZ 2mpepm0iHo9VUX7ptv/QTNTI+l80DVoRtO2FWhLsp7Yt/4QrkIlxkKPFK1urDdKF meklyLHuNEZF2hvQzBHvkBKK5tp5gUQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:35 2026 by rpki-client